{
  "release": "0.35.0",
  "baseline_release": "0.34.0",
  "release_date": "2026-10-09",
  "release_tag": "v0.35.0",
  "release_url": "https://github.com/aleksUIX/pixellint/releases/tag/v0.35.0",
  "verified_source_commit": "3eb6056cacfd21ac264362499c713727db3ceffe",
  "snapshot": {
    "samples": 8550,
    "kinds": {
      "url": 108,
      "vast": 8397,
      "json": 45
    },
    "first_created_at": "2026-08-27T00:48:55.860Z",
    "last_created_at": "2026-10-09T10:39:10.570Z",
    "read_at": "2026-10-09T11:20:41.145938+00:00",
    "samples_sha256": "27957cd4cf2b52e397c33adac1f472d70fbd1b46645b0a4dc9e1a11152589bef",
    "replay_input_sha256": "e78a9c82896ced75c6f148ded608f9ad5415fdde5b50aa9348a35d827a5f9109",
    "status": "reused_verified_frozen_snapshot",
    "complete_http_captures": 0,
    "refresh_attempt": {
      "status": "unavailable",
      "provider": "Cloudflare",
      "code": 7403,
      "reason": "Current credentials did not authorize a fresh D1 read."
    },
    "scope": "Frozen stored artifacts read before this round. Artifacts added after the recorded read are not included. No production precision, recall or remote acceptance measurement."
  },
  "before": {
    "samples": 8550,
    "coverage": {
      "vendor_pack_selected": 4398,
      "core_only": 2554,
      "directory_only": 1598
    },
    "findings": {
      "error": 284,
      "info": 1615,
      "warning": 728
    },
    "error_samples": 216
  },
  "after": {
    "samples": 8550,
    "coverage": {
      "vendor_pack_selected": 4398,
      "core_only": 2554,
      "directory_only": 1598
    },
    "findings": {
      "error": 284,
      "info": 1615,
      "warning": 728
    },
    "error_samples": 216
  },
  "delta": {
    "samples": 8550,
    "selection_transitions": {
      "vendor_pack_selected_to_vendor_pack_selected": 4398,
      "core_only_to_core_only": 2554,
      "directory_only_to_directory_only": 1598
    },
    "changed_samples": 0,
    "added_findings": {},
    "removed_findings": {},
    "newly_detected_error_samples": 0,
    "cleared_error_samples": 0,
    "newly_selected_vendor_pack_samples": 0,
    "lost_vendor_pack_samples": 0,
    "finding_identity": [
      "plugin_id",
      "code",
      "severity",
      "field"
    ],
    "exceptions": 0
  },
  "inventory": {
    "packs": 161,
    "vendors": 85,
    "field_contracts": 5746,
    "cross_field_assertions": 557,
    "body_contract_scopes": 475,
    "http_contract_scopes": 62,
    "query_contract_scopes": 6,
    "bulk_query_sources": 1,
    "http_contract_packs": 55,
    "changed_packs_this_round": 6,
    "new_packs_this_round": 0,
    "deepened_existing_packs_this_round": 6,
    "remaining_requirement_entries": 497,
    "remaining_requirements_note": "Overlapping open requirements and source-case counts do not establish a percentage of vendor specification coverage."
  },
  "changed_pack_ids": [
    "vendor/flashtalking-ftrack",
    "vendor/hubspot-pixel",
    "vendor/liveramp-envelope",
    "vendor/liveramp-envelope-refresh",
    "vendor/matomo",
    "vendor/outbrain"
  ],
  "new_pack_ids": [],
  "source_case_comparison": {
    "cases": 320,
    "baseline_oracle_passes": 174,
    "release_oracle_passes": 320,
    "improved_outcomes": 146,
    "unreviewed_regressions": 0,
    "newly_detected_error_cases": 1,
    "cleared_prior_error_cases": 27,
    "baseline_error_findings": 43,
    "release_error_findings": 13,
    "input_sha256": "368dd7da53f89c24d1715ea5143e0ce24b18f577cf06dae56a301ee85161181e",
    "evidence_composition": {
      "engine_source_cases": 217,
      "sdk_source_cases": 103
    },
    "per_pack": {
      "vendor/flashtalking-ftrack": {
        "cases": 44,
        "baseline_oracle_passes": 32,
        "release_oracle_passes": 44,
        "improved_outcomes": 12,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 0,
        "cleared_prior_error_cases": 0
      },
      "vendor/hubspot-pixel": {
        "cases": 20,
        "baseline_oracle_passes": 12,
        "release_oracle_passes": 20,
        "improved_outcomes": 8,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 0,
        "cleared_prior_error_cases": 0
      },
      "vendor/liveramp-envelope": {
        "cases": 55,
        "baseline_oracle_passes": 21,
        "release_oracle_passes": 55,
        "improved_outcomes": 34,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 0,
        "cleared_prior_error_cases": 7
      },
      "vendor/liveramp-envelope-refresh": {
        "cases": 55,
        "baseline_oracle_passes": 21,
        "release_oracle_passes": 55,
        "improved_outcomes": 34,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 0,
        "cleared_prior_error_cases": 7
      },
      "vendor/matomo": {
        "cases": 59,
        "baseline_oracle_passes": 37,
        "release_oracle_passes": 59,
        "improved_outcomes": 22,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 1,
        "cleared_prior_error_cases": 13
      },
      "vendor/outbrain": {
        "cases": 87,
        "baseline_oracle_passes": 51,
        "release_oracle_passes": 87,
        "improved_outcomes": 36,
        "unreviewed_regressions": 0,
        "newly_detected_error_cases": 0,
        "cleared_prior_error_cases": 0
      }
    },
    "interpretation": "Independent producer executions, primary-source boundaries and separately labeled authored mutations. Outcome improvements include corrected prior findings and additional detection. No remote acceptance labels or production precision/recall. Counts do not establish vendor specification coverage."
  },
  "retained_source_cases": {
    "cases": 601,
    "historical_oracle_matches": 598,
    "intentional_advisory_transitions": 3,
    "reviewed_current_oracle_matches": 601,
    "unreviewed_regressions": 0,
    "input_sha256": "66f4cef7a4b16e65be7574b5f9ee965efb384cf18ca1cf5d5741adee43f81adb",
    "advisory_transitions": {
      "vendor/flashtalking-ftrack": 2,
      "vendor/hubspot-pixel": 1
    },
    "additional_golden_corrections": {
      "cases": 2,
      "included_in_retained_601": false,
      "packs": [
        "vendor/liveramp-envelope",
        "vendor/liveramp-envelope-refresh"
      ],
      "reason": "Conflicting repeated atype values do not establish server mode, so missing X-Forwarded-For cannot be asserted."
    }
  },
  "har_import": {
    "interfaces": [
      "Rust",
      "CLI",
      "JavaScript/npm",
      "MCP",
      "browser playground"
    ],
    "offline_validation": true,
    "sends_recorded_requests": false,
    "capture_availability": [
      "available",
      "absent",
      "unavailable",
      "redacted"
    ],
    "header_policies": [
      "unknown",
      "chrome_sanitized",
      "complete"
    ],
    "default_header_policy": "unknown",
    "default_reference_time": "recorded HAR entry startedDateTime",
    "explicit_override_precedence": true,
    "missing_or_invalid_capture_time": "requires explicit reference-time override",
    "observed_fidelity": [
      "original method",
      "original URL and duplicate query ordering",
      "ordered header lines",
      "inspectable raw body text",
      "entry provenance"
    ],
    "limits": [
      "Request extraction does not validate the full HAR response, page or timing schema.",
      "Parsed queryString and postData.params do not establish original wire bytes.",
      "Encoded body extensions, unsupported character encodings and unavailable or ambiguous body representations remain explicit.",
      "Unknown MIME or Content-Encoding defers decoder-dependent checks; known method, query and header violations remain active.",
      "Header policies do not guarantee complete sanitization. HAR inputs and generated reports may retain sensitive data."
    ],
    "playground_privacy": "HAR and complete HTTP request inputs skip sample upload and query sharing."
  },
  "verification": {
    "workspace_tests": 520,
    "workspace_test_failures": 0,
    "workspace_source_scope": "The complete 520-test workspace passes on the verified source after the typed-chunk update. Release preparation changes metadata only; all 239 source fingerprints remain unchanged.",
    "source_ci": "passed",
    "infrastructure_ci": "passed",
    "native_npm_report_comparisons": 19300,
    "native_browser_wasm_report_comparisons": 19300,
    "full_corpus_report_comparisons_per_suite": 18942,
    "single_entry_controls_per_suite": 358,
    "corpora": {
      "frozen_d1": 8550,
      "retained_source_cases": 601,
      "new_source_cases": 320
    },
    "har_native_npm_comparisons": 72,
    "har_inputs": 8,
    "har_header_policies": 3,
    "universal_guard_validations": 96,
    "sdk_capture_controls": 18,
    "hash_loop_equivalence_vectors": 32808,
    "post_lint_native_reports_unchanged": 9471,
    "native_npm_parity_scope": "Complete native/npm report comparison across released 0.34.0 and rebuilt 0.35.0, at the same recorded or authored reference clocks.",
    "native_browser_parity_scope": "Separate complete native/browser WASM report comparison across released 0.34.0 and rebuilt 0.35.0, at the same recorded or authored reference clocks.",
    "har_parity_scope": "Complete import and validation reports across native CLI and rebuilt npm WASM, three header policies, recorded clocks and explicit overrides.",
    "ci_source_url": "https://github.com/aleksUIX/pixellint/actions/runs/37997886407",
    "ci_infrastructure_url": "https://github.com/aleksUIX/pixellint-infra/actions/runs/37996467912"
  },
  "limitations": [
    "A fresh D1 read was unavailable with Cloudflare error 7403. The frozen snapshot predates this round and contains no complete HTTP captures.",
    "No stored sample values, per-sample captured URLs, credentials or private filesystem paths are published in this report.",
    "The unchanged stored replay is a compatibility result for this corpus. It cannot measure the practical gain of HTTP or HAR checks.",
    "No production precision, recall, remote vendor acceptance or full-specification coverage is established.",
    "Per-pack source cases, producer executions and retained goldens overlap. Counts are not additive specification coverage.",
    "Unpublished vendor grammar, account authorization, consent collection and runtime-dependent parser behavior remain documented gaps."
  ],
  "source_audit": "https://github.com/aleksUIX/pixellint/blob/v0.35.0/docs/RULEPACK_DEPTH_AUDIT.json",
  "source_commit": "8c4a794d5e723bcc4c0b6a06f82c618e4402db72"
}